Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/rg92faZanaYES8NBj5pg8WmI5nI.roa
File: rg92faZanaYES8NBj5pg8WmI5nI.roa (raw, json)
Hash identifier: 8R4hL47sFCLdHAmoIZE8IPnGm4ZN8Yi2FpnpcDwoEOA=
Subject key identifier: AE:0F:76:7D:A6:5A:9D:A6:04:4B:C3:41:8F:9A:60:F1:69:88:E6:72
Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202
Certificate serial: 0195D84538C34AC226715618644413144197
Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/rg92faZanaYES8NBj5pg8WmI5nI.roa
Signing time: Thu 27 Mar 2025 15:42:49 +0000
ROA not before: Thu 27 Mar 2025 15:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5419
IP address blocks: 212.125.128.0/22 maxlen: 22
212.125.128.0/23 maxlen: 23
212.125.128.0/24 maxlen: 24
212.125.129.0/24 maxlen: 24
212.125.130.0/23 maxlen: 23
212.125.130.0/24 maxlen: 24
212.125.131.0/24 maxlen: 24
212.125.135.0/24 maxlen: 24
212.125.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:45:38:c3:4a:c2:26:71:56:18:64:44:13:14:41:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202
Validity
Not Before: Mar 27 15:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae0f767da65a9da6044bc3418f9a60f16988e672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:02:fa:47:e5:0c:c7:c7:7a:4c:54:48:8b:
5e:03:33:95:18:12:a2:6d:89:5c:76:ac:2f:0d:cc:
2c:b0:ac:1b:4c:a4:6b:c4:c0:a3:36:45:1d:34:26:
88:0f:27:06:ae:b2:21:c7:97:87:f7:56:40:fa:7f:
25:99:65:89:39:07:32:49:35:d2:6b:fe:b4:b6:f6:
f9:97:e3:75:9a:23:69:9a:0a:01:52:95:2e:e1:6f:
62:55:f1:77:fc:d2:ec:f7:b5:b0:48:2c:7d:bb:c9:
eb:fc:35:f7:80:c8:f9:80:9b:d7:af:5e:b7:69:77:
80:26:81:77:bd:a1:4c:11:cf:19:cc:2e:ae:81:e5:
7a:f5:63:c8:39:56:f3:7c:1b:42:e6:34:23:1b:4b:
ab:0d:06:1f:b3:dc:1a:52:2f:23:5d:cc:b2:7c:5d:
8e:f7:8a:b5:c4:9e:a2:2c:1d:cc:54:4d:49:99:1d:
8d:55:53:34:5f:a8:1f:21:0b:af:6c:be:3f:7f:dc:
69:ac:db:09:15:c5:60:5f:b2:d7:fd:f2:6a:65:19:
aa:95:c1:c7:8e:f6:38:d4:62:99:5b:f6:19:34:30:
b1:9e:d8:da:59:7e:20:57:d3:e0:d5:18:ee:d5:9b:
c7:3d:d1:05:65:26:58:ec:93:d1:39:4c:df:1b:bf:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0F:76:7D:A6:5A:9D:A6:04:4B:C3:41:8F:9A:60:F1:69:88:E6:72
X509v3 Authority Key Identifier:
keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/rg92faZanaYES8NBj5pg8WmI5nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.125.128.0/22
212.125.135.0/24
212.125.143.0/24
Signature Algorithm: sha256WithRSAEncryption
28:46:c8:64:4c:16:de:df:59:1a:88:a9:60:e7:cd:2c:e9:58:
0e:0e:36:77:f8:67:8f:fd:f5:6d:ba:5c:16:d1:78:60:a0:07:
a4:ff:29:fb:c5:85:f3:3a:c2:c0:6e:3f:15:aa:c1:72:a5:30:
9a:aa:d4:32:ff:2c:73:ea:40:37:ea:56:5a:15:7a:9e:1b:7c:
6d:f4:e8:68:af:27:8a:75:ba:38:29:f6:92:2c:b0:15:b6:f8:
ab:cd:90:b6:2a:81:c7:b7:aa:a0:49:3a:33:f5:8d:4b:3d:a2:
be:d9:2b:4a:27:63:22:29:79:b5:81:59:80:f2:93:82:b4:ec:
24:d8:2e:62:9c:ae:9b:44:e5:01:44:97:43:bb:8d:80:9f:10:
69:33:d9:42:d1:72:a4:77:4c:0b:2a:d3:64:b0:5c:fa:b7:11:
be:b3:7d:82:9b:88:7b:47:7b:2d:87:73:1b:28:81:d7:78:fe:
e1:b5:9c:bf:58:ab:49:10:ce:1f:d5:76:c4:90:01:c5:a2:81:
60:8e:75:de:7d:a9:d2:2c:02:81:06:86:c0:94:52:fc:c5:15:
3d:90:ab:f2:5d:09:db:45:2a:c4:8c:20:ec:b0:3d:03:1a:29:
65:f7:59:bf:1a:9b:56:35:aa:19:f5:d3:38:48:8b:79:38:ba:
a4:ec:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net